cPanel DNSClustering and CSF

[D-Litz]

So I don't have to re-write everything, I have copy/pasted a post I opened on the CSF forums. I'm re-posting it here also just in case someone here could shed some light...



My Post on CSF Forums

Hello, we are having an issue with CSF version v4.60 and the cPanel DNSClustering. When a client tries to add a addon domain to there account, it fails.

We are running

cPanel 11.24.4-C34851 - WHM 11.24.2 - X 3.9
REDHAT Enterprise 5.3 i686 standard on xq41
CSF v4.60

cPanel 11.24.4-C34851 - WHM 11.24.2 - X 3.9
REDHAT Enterprise 5.3 i686 standard on xq42
CSF v4.60

On Both Macines with DNSClustering enabled. Currently with CSF running, DNS is not working...


We opened a support ticket with cPanel and this is what the support tech said.


When they tried to add the addon domain to the box, below is what they told me

**********************cPanel Tech Support Begin*************************
Hello,

I notice the following errors in /usr/local/cpanel/logs/error_log:

"(internal error) Unable determine if the zone fischertechnik.com.mx
exists on the remote server [***.36.250.114] (Connection Timed Out)
(internal error) Unable to add the zone fischertechnik.com.mx on the remote
server [***.36.250.114] (Connection Timed Out)
(internal error) Unable to save the zone fischertechnik.com.mx on the remote
server [***.36.250.114] (Connection Timed Out)
(internal error) Unable to reload bind on the remote server [***.36.250.114]
(Connection Timed Out)"

To confirm, do you still use the ***.36.250.114 server in "WHM Main
>> Cluster/Remote Access >> Configure Cluster" ? As it appears
that server is not responding.

Please advise.

Thanks.
******************cPanel Tech Support End****************************


******************My Reply Begin********************************
Yes, we have two servers located at the Softlayer DataCenter. One is in Dallas
and one is in Washington, DC.

The two servers are suppose to be setup using the cPanelDNS function. Your
telling me its not working?
We had a problem with getting it to run at first, however Softlayer Support was
able to get it running, I guess not for long as your saying its not working
now.
If you are able to resolve this, please do.

If you would like to take a look at the other server via root, below is the
login info.
*******************My Reply End*********************************

******************cpanel tech support begin********************
Hello,

This appears to be related to the CSF Firewalls installed.

I disabled it on both servers temporarily, and I was then able to add
fischertechnik.com.mx as an add-on domain without error.

Please do adjust the firewalls on both servers to allow proper configuration
for the DNS Cluster setup.

If you have any further questions, just let us know.

Thank you.
******************cPanel Tech Support End*********************



I need some suggestions on what feature of CSF to adjust to allow my DNS clustering to work again.

Thank You for your time.

 

[Technics]

The fastest way to cure this would be to add the server IP's to the allowed and ignore lists within CSF.

csf -a ip_address

Run that on each server so they can communicate with each other and CSF won't then block the IP's.

 

[D-Litz]

The fastest way to cure this would be to add the server IP's to the allowed and ignore lists within CSF.

csf -a ip_address

Run that on each server so they can communicate with each other and CSF won't then block the IP's.

Thank You very much, that did the trick...

One server had the other servers IP in the deny list...

 

[Technics]

No Problem